Overview
Azure NSG Group Event: AzureNetworkSecurityGroupEvent
Log Structure
Table Fields
Field | Description |
|---|---|
TABLE | AzureActivity was a value derived from TYPE. |
SYSTEM | Depends on CALLERIPADDRESS field if not empty, else will depend on configured domain value. |
DATE | Extracted date value from CREATEDDATETIME. |
TIME | Extracted time value from CREATEDDATETIME. |
DATETIME | Extracted datetime value from CREATEDDATETIME and formatted using RFC3339Nano (2023-03-03T01:59:16.756103200Z00:00) format. |
COLLECTIONDATETIME | The datetime value when the log was collected from the API and formatted using RFC3339Nano (2023-03-03T01:59:16.756103200Z00:00) format. |
Azure NSG Group Rule Counter: AzureNetworkSecurityGroupRuleCounter
Log Structure
Table Fields
Field | Description |
|---|---|
TABLE | AzureActivity was a value derived from TYPE. |
SYSTEM | Depends on CALLERIPADDRESS field if not empty, else will depend on configured domain value. |
DATE | Extracted date value from CREATEDDATETIME. |
TIME | Extracted time value from CREATEDDATETIME. |
DATETIME | Extracted datetime value from CREATEDDATETIME and formatted using RFC3339Nano (2023-03-03T01:59:16.756103200Z00:00) format. |
COLLECTIONDATETIME | The datetime value when the log was collected from the API and formatted using RFC3339Nano (2023-03-03T01:59:16.756103200Z00:00) format. |
Notes
https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-nsg-manage-log